vyos-1x.git/interface-definitions/include/firewall/source-destination-group.xml.i, branch feature/T9082-codeql-cppVyOS command definitions, scripts, and utilities (mirror of https://github.com/vyos/vyos-1x.git)
https://git.amelek.net/vyos/vyos-1x.git/atom?h=feature%2FT9082-codeql-cpp2026-02-15T11:58:14+00:00xml: T8271: consolidate source-destination-group.xml.i and it's IPv4 equivalent2026-02-15T11:58:14+00:00Christian Breunigchristian@breunig.cc2026-02-15T11:08:20+00:00urn:sha1:6b8139a9ed7426356f9515603e855fb89e5506af
$ make interface_definitions
$ git add -f templates-cfg
$ ... refactor
$ make interface_definitions
$ git diff templates-cfg
No change in any node.def file detected.
xml: T8271: create re-usable XML block for port-group and domain-group2026-02-15T11:58:05+00:00Christian Breunigchristian@breunig.cc2026-02-15T10:58:34+00:00urn:sha1:8a5094e0bd4c1be7000bc520d81ac03f6daff3f3
$ make interface_definitions
$ git add -f templates-cfg
$ ... refactor
$ make interface_definitions
$ git diff templates-cfg
No change in any node.def file detected.
firewall: T970: Add firewall group domain-group2022-05-28T13:20:13+00:00Viacheslav Hletenkov.gletenko@vyos.io2022-05-17T21:30:50+00:00urn:sha1:e990b2f4c045f5d1be02915ec7d8869d5475ed4e
Domain group allows to filter addresses by domain main
Resolved addresses as elements are stored to named "nft set"
that used in the nftables rules
Also added a dynamic "resolver" systemd daemon
vyos-domain-group-resolve.service which starts python script
for the domain-group addresses resolving by timeout 300 sec
set firewall group domain-group DOMAINS address 'example.com'
set firewall group domain-group DOMAINS address 'example.org'
set firewall name FOO rule 10 action 'drop'
set firewall name FOO rule 10 source group domain-group 'DOMAINS'
set interfaces ethernet eth0 firewall local name 'FOO'
nft list table ip filter
table ip filter {
set DOMAINS {
type ipv4_addr
flags interval
elements = { 192.0.2.1, 192.0.2.85,
203.0.113.55, 203.0.113.58 }
}
chain NAME_FOO {
ip saddr @DOMAINS counter packets 0 bytes 0 drop comment "FOO-10"
counter packets 0 bytes 0 return comment "FOO default-action accept"
}
}
firewall: T3560: Add support for MAC address groups2022-01-18T19:35:03+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2022-01-18T14:29:03+00:00urn:sha1:0a5a78621b2b28f06af1f40c10ee8bb880f860a0firewall: T2199: Migrate firewall to XML/Python2021-12-06T20:20:49+00:00sarthurdev965089+sarthurdev@users.noreply.github.com2021-07-28T10:03:21+00:00urn:sha1:fdeba8da3e99256fe449e331d0b833a941315226firewall: T3568: add XML definitions for firewall2021-05-25T20:17:16+00:00Viacheslav Hletenkov.gletenko@vyos.io2021-05-25T20:17:16+00:00urn:sha1:654c8cad2daaf84a07e4664d2c0469a863a46bdc
Add XML for configuration mode firewall. Used for future rewriting it to Python style.